CVE Intelligence

Forma E-Learning Suite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Forma E-Learning Suite: 1 record(s), with affected versions and fixes.

CVE-2020-36998 Medium · 6.4 CWE-79 Jan 30, 2026
forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and profile parameters. Attackers can inject malicious scripts in course code, name, description fields, and email parameter to execute arbitrary JavaScript without proper input sanitization.